SY0-301 · Question #619
Which of the following is the MOST likely cause of users being unable to verify a single user's email signature and that user being unable to decrypt sent messages?
The correct answer is A. Unmatched key pairs. Unmatched key pairs occur when the public key published for a user does not correspond to the private key they hold, preventing others from verifying signatures and the user from decrypting received messages.
Question
Which of the following is the MOST likely cause of users being unable to verify a single user's email signature and that user being unable to decrypt sent messages?
Options
- AUnmatched key pairs
- BCorrupt key escrow
- CWeak public key
- DWeak private key
How the community answered
(33 responses)- A79% (26)
- B12% (4)
- C6% (2)
- D3% (1)
Why each option
Unmatched key pairs occur when the public key published for a user does not correspond to the private key they hold, preventing others from verifying signatures and the user from decrypting received messages.
In asymmetric cryptography, a sender encrypts a message with the recipient's public key and the recipient decrypts with their matching private key - if the keys do not mathematically correspond, decryption fails. Similarly, a digital signature is created with a private key and verified with the paired public key - a mismatch means verification fails for all recipients. Both symptoms described in the question - failed signature verification by others and failed decryption by the user - point precisely to a public/private key pair mismatch.
Key escrow stores backup copies of keys for authorized recovery; corruption would affect recovery scenarios but would not cause both signature verification failure and decryption failure simultaneously.
A weak public key reduces cryptographic strength but does not cause complete decryption failure or prevent signature verification.
A weak private key reduces security against brute-force attacks but still functions for signing and decryption as long as the key pair is matched.
Concept tested: PKI key pair mismatch signature and decryption failure
Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/public-private-key-pairs
Topics
Community Discussion
No community discussion yet for this question.